ERNW on Tour

Conferences:

Hacker Halted Miami 2011

Miami, 25-27 October 2011

Do they deliver: Practical Security and Load Testing of the Cloud
Speaker: Matthias Luft

The rapid evolution of cloud based computing is often used to illustrate a possible paradigm shift in computing. The centralized processing and storing of data allows the development of new architectural approaches as well as completely new usage experiences. The implementation of these architectural models is a critical requirement to profit from a shift in computing to this new model.

To provide a toolset for measuring potential profits for performing this shift, we want to introduce "skyscraper": It is a framework for load testing cloud based applications including a specially developed demo application for major cloud platforms. Using skyscraper, the results of several load tests are illustrated to show possibilities and caveats of the scalability of cloud based infrastructures. The evaluations were performed against the platforms of several major cloud service providers hosting the demo application of skyscraper. This demo application is utilizing all possibilities to improve scalability and security of cloudified applications, so a guide to the security and scalability features and limitations of cloud platforms is presented in addition.

TROOPERS11 - New date
TROOPERS12 takes place in March, 29th - 23rd, 2012 in Heidelberg. Mark your calendars now and sign up for the official TROOPERS newsletter to stay up-to-date. [More]
Security Testing
Testing IT security is one of the core competences of ERNW. Many of our customers get their IT infrastructure and (Web) applications checked on a regular basis. This may either be done on a very technical level in terms of penetration testing or in a more formal way in terms of general security audits, during which we verify the IT Security Compliance of your company compared to best practices according to ISO17799/ISO27001 ... [More]
Research & Technology-Evaluation
Research is the foundation of our Know-How leadership. The objections of this work is to unveil security flaws and vulnerabilities in protocols, technologies and products. Some findings derive from design-flaws, some from poor implementation on a technical level.... [More]